17aff51cd3a2a67fd37c8f081b2552d532d9505795a2060d06c33915e68ff611

General

Target

17aff51cd3a2a67fd37c8f081b2552d532d9505795a2060d06c33915e68ff611
Size

44KB
MD5

0ab2491a003b0c6ea9ae28fd2ef41f69
SHA1

331670e6948c10afef6039dd3ea7d99acd405cd5
SHA256

17aff51cd3a2a67fd37c8f081b2552d532d9505795a2060d06c33915e68ff611
SHA512

2ffbcec186d7e269d1734e0e8bb63e6d443c982677e63ebe009cf9c7d7dc1311a6a05d811256756af2fce0dbdc832f2f8c661b75f67fff9b4807ed70fed57f3b
SSDEEP

768:sWTVYqnk+BhNhTtgRC+U4uZC3ePkZ/j1lS:siYIk2vhTtgEt4eeBl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17aff51cd3a2a67fd37c8f081b2552d532d9505795a2060d06c33915e68ff611

Files

17aff51cd3a2a67fd37c8f081b2552d532d9505795a2060d06c33915e68ff611
.dll windows:4 windows x86 arch:x86

56a4b268060d7eebe6032eb037905cce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
HeapFree
GetLastError
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
CloseHandle
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

dnsapi

DnsQuery_A
DnsRecordListFree

Exports

Exports

GetMX

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56a4b268060d7eebe6032eb037905cce

Headers

File Characteristics

Imports

kernel32

dnsapi

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 3KB